MGASA-2026-0355
- Source
- https://advisories.mageia.org/MGASA-2026-0355.html
- Import Source
- https://advisories.mageia.org/MGASA-2026-0355.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2026-0355
- Upstream
- Published
- 2026-09-01T03:06:53Z
- Modified
- 2026-09-01T03:26:20.493146665Z
- Summary
- Updated vim packages fix security vulnerabilities
- Details
-
Arbitrary Code Execution via Shell Keyword Lookup in Vim < 9.2.0839. (CVE-2026-73077) Arbitrary Code Execution via Netrw Menu Construction in Vim < 9.2.0840. (CVE-2026-73078) Heap Buffer Overflow in Text Property Handling in Vim < 9.2.0841. (CVE-2026-73074) Stack Buffer Overflow in the Vim Socket Server in Vim < 9.2.0842. (CVE-2026-73070) Out-of-bounds Access in Popup Opacity Handling in Vim >= 9.2.0469 && Vim < 9.2.0843. (CVE-2026-73075) Use-after-free in JSON Decoding in Vim >= 9.2.0511 && Vim < 9.2.0844. (CVE-2026-73071) Arbitrary Ex Command Execution in C Omni-Completion in Vim < 9.2.0845. (CVE-2026-73073) Heap Buffer Overflow when Loading a Spell File in Vim < 9.2.0846. (CVE-2026-73072) Arbitrary Command Execution via Malicious
.VimballRecordEntry Replay invimball.vim. (CVE-2026-73076) - References
-
- https://advisories.mageia.org/MGASA-2026-0355.html
- https://bugs.mageia.org/show_bug.cgi?id=36127
- https://www.openwall.com/lists/oss-security/2026/07/24/17
- https://www.openwall.com/lists/oss-security/2026/07/24/18
- https://www.openwall.com/lists/oss-security/2026/07/24/19
- https://www.openwall.com/lists/oss-security/2026/07/24/20
- https://www.openwall.com/lists/oss-security/2026/07/24/21
- https://www.openwall.com/lists/oss-security/2026/07/24/28
- https://www.openwall.com/lists/oss-security/2026/07/24/29
- https://www.openwall.com/lists/oss-security/2026/07/24/30
- https://www.openwall.com/lists/oss-security/2026/07/24/31
- https://github.com/vim/vim/security/advisories/GHSA-r5v6-q6j8-8qw2
- https://github.com/vim/vim/security/advisories/GHSA-rcr7-f3wr-22r2
- https://github.com/vim/vim/security/advisories/GHSA-hm4g-pjfx-m27j
- https://github.com/vim/vim/security/advisories/GHSA-49m8-wwxj-mr69
- https://github.com/vim/vim/security/advisories/GHSA-pmvp-6rcj-98p4
- https://github.com/vim/vim/security/advisories/GHSA-69ch-22ch-r887
- https://github.com/vim/vim/security/advisories/GHSA-cx73-phcg-3j5g
- https://github.com/vim/vim/security/advisories/GHSA-9jqx-hgpr-6v64
- https://github.com/vim/vim/security/advisories/GHSA-r22p-fhw4-84p2
- https://www.openwall.com/lists/oss-security/2026/08/25/8
- https://github.com/vim/vim/security/advisories/GHSA-r77m-8m55-rpr6
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:10 / vim
Package
- Name
- vim
- Purl
- pkg:rpm/mageia/vim?arch=source&distro=mageia-10
Mageia:9 / vim
Package
- Name
- vim
- Purl
- pkg:rpm/mageia/vim?arch=source&distro=mageia-9